Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f3f003b-4130-3d2a-85f3-8a01183d2603.roa
File:                     8f3f003b-4130-3d2a-85f3-8a01183d2603.roa (raw, json)
Hash identifier:          oVqet5BfoHLjIAm63Med1c27o3fxdXhoXCEMOuPL4JI=
Subject key identifier:   9A:73:EB:00:35:47:9F:3E:CE:9F:DD:FA:0D:0F:CB:5C:1E:5D:E8:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858484AAADBEAEDDEBB3FCABB3180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f3f003b-4130-3d2a-85f3-8a01183d2603.roa
Signing time:             Sun 22 Dec 2024 14:00:51 +0000
ROA not before:           Sun 22 Dec 2024 14:00:51 +0000
ROA not after:            Sat 22 Mar 2025 13:00:51 +0000
asID:                     396602
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4a:aa:db:ea:ed:de:bb:3f:ca:bb:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Dec 22 14:00:51 2024 GMT
            Not After : Mar 22 13:00:51 2025 GMT
        Subject: CN=50f0ef3d-5ea8-45e9-9d9c-690ef4544e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:b2:cd:9c:69:f6:aa:f4:74:90:d8:f9:0b:
                    00:e7:63:6b:bd:eb:d8:0c:24:ad:88:df:44:1f:a3:
                    7c:f9:d3:0b:6d:a9:79:d8:22:3e:6f:62:50:0a:2b:
                    64:76:9b:4d:f3:46:58:12:a3:0c:70:d7:77:71:0c:
                    1d:98:46:f2:43:10:3f:82:01:75:97:d5:b1:b9:96:
                    f3:59:ec:14:2c:84:88:4a:e7:ed:3e:6f:49:73:69:
                    62:c2:cd:dd:25:dc:21:6b:80:1c:e7:3d:cc:15:97:
                    67:a0:89:7c:d8:c0:e4:69:8d:f4:d6:1d:18:93:8d:
                    ed:52:09:62:af:9a:2a:27:4f:32:3c:37:65:00:a9:
                    06:94:6e:26:85:2c:97:5e:1c:b0:a8:81:99:61:f5:
                    d1:f6:ef:a7:7d:66:4c:46:0a:d0:e0:57:33:c7:5a:
                    16:0e:8a:56:ee:7b:8a:84:76:83:84:ba:c9:f6:ad:
                    22:23:8b:13:95:5e:3b:0f:dd:a8:eb:2d:b2:9d:73:
                    70:bb:35:f2:0f:22:96:42:d4:b3:e6:7e:83:61:0b:
                    1b:5e:6f:2b:7e:10:40:70:91:87:7b:3a:ea:39:e6:
                    49:9a:4d:4b:d7:be:6b:e8:13:64:c8:98:43:0c:02:
                    a0:d5:41:9f:40:c3:8a:3d:fd:a8:be:b2:b8:ed:e1:
                    28:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:73:EB:00:35:47:9F:3E:CE:9F:DD:FA:0D:0F:CB:5C:1E:5D:E8:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f3f003b-4130-3d2a-85f3-8a01183d2603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:61:b7:58:31:b8:66:9d:d5:49:8d:9b:63:3e:bc:b9:63:fe:
         3e:8f:cd:91:90:f5:26:00:6c:28:7e:35:3b:be:cb:da:35:04:
         99:8d:e7:9b:43:0b:3e:69:7a:46:ec:c5:91:43:1d:10:a2:df:
         f3:59:ca:12:ad:a2:c6:54:fb:45:0b:41:00:98:ae:df:3e:8c:
         48:43:48:6a:1b:5f:9e:8d:9b:11:73:b3:0f:fd:af:57:1e:8b:
         9f:f0:64:97:dd:90:c4:66:88:00:a5:fb:0c:a5:62:85:87:d3:
         20:e2:72:b8:0c:4d:50:fe:db:87:c3:0c:7a:35:bc:37:47:14:
         f6:61:1b:de:42:5d:95:32:0d:fa:4c:9a:d5:69:a5:9d:1e:e6:
         bf:21:c1:c7:c5:4a:d5:a6:de:86:bb:3d:52:98:38:c4:40:24:
         db:1d:07:81:6a:db:67:8c:99:f1:be:d9:fa:d7:e3:aa:91:47:
         11:47:2d:92:4a:21:58:c6:28:4d:16:65:03:15:17:6e:49:15:
         a3:cd:62:e4:06:9f:ef:91:92:ac:45:18:77:7a:9f:ce:74:15:
         a3:d5:66:3b:5d:e0:8d:e2:97:01:db:3e:6e:20:ae:47:87:ec:
         91:1b:1a:b9:9d:10:3a:59:a1:24:a3:a9:88:f3:0b:00:52:71:
         60:4b:59:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----